   "Throws a permission service error if no ACLs exist that grant the desired permission to the
   context user on group."
   [context action-description permission group]
-  ; (proto-repl.saved-values/save 12)
-  (when-not (or (get-instance-acls context permission group)
-                (get-provider-acls context permission group)
-                (get-system-acls context permission))
-    (throw-group-permission-error action-description group)))
+  (let [context (put-sids-in-context context)]
+    (when-not (or (get-instance-acls context permission group)
+                  (get-provider-acls context permission group)
+                  (get-system-acls context permission))
+      (throw-group-permission-error action-description group))))
 
 (defn verify-can-create-group
   "Throws a service error if the context user cannot create a group under provider-id."


(defmethod qe/add-acl-conditions-to-query :access-group
  [context query]
  (let [system-condition (when (get-system-acls context :read)
                           (qm/negated-condition (qm/exist-condition :provider-id)))
        provider-ids (map #(-> % :provider-object-identity :provider-id)
                          (get-all-provider-acls context :read))

  (when-let [target-guid (:legacy-guid group)]
    (seq
      (filter #(= target-guid (-> % :single-instance-object-identity :target-guid))
              (acl/get-permitting-acls context
                                       :single-instance-object "GROUP" permission)))))

(defn- describe-group
